# How Replavia follows Instagram and Meta platform rules

> Replavia asks for only three Instagram permissions and messages only people who contacted you first. Its AI says it is automated, and it deletes data when Meta or the person asks.

- Topic: Account safety
- In the app: Open Account safety — https://app.replavia.com/safety
- Last checked: 2026-10-29
- Web page: https://replavia.com/help/how-replavia-follows-meta-rules

Meta publishes rules for every app that uses Instagram’s API. This page lists, one by one, how Replavia keeps to them. For our App Review and Tech Provider status, see [Is Replavia approved by Meta?](https://replavia.com/help/is-replavia-approved-by-meta).

## Only the permissions the product needs

When you connect, Replavia asks Instagram for three permissions, and nothing more:

| Permission | Why we need it |
|---|---|
| Basic profile | To show which account you connected. |
| Manage comments | To read comments that match your keyword, and to reply or hide one when you choose. |
| Manage messages | To send the DMs your automations write. |

We cannot post to your feed, read your password or see your followers list.

## Only people who reached out first

Replavia never cold-messages anyone. Every DM answers something the person did: a comment, a story reply, a mention or a DM.

- Each comment gets at most one automated DM, which is Instagram’s rule.
- Replies go out only inside Instagram’s 24-hour window. Replavia does not use message tags to get around it. See [Instagram’s 24-hour messaging window](https://replavia.com/help/instagram-24-hour-window).
- Sending stays under hourly and daily limits, with a warm-up for new accounts. See [Replavia’s sending limits](https://replavia.com/help/sending-limits).

## No follow-gating

Meta does not allow an app to hold back a reward until someone follows. In Replavia the person always gets what they asked for first. A follow invite can come after it, never instead of it. Replavia refuses invite wording that makes following a condition. See [The follow invite](https://replavia.com/help/follow-invite).

## Automated replies say they are automated

Instagram asks automated conversations to make that clear. The AI assistant tells the person it is automated when the chat starts, and again after a gap of a day. Saying “talk to a person” hands the chat to you. See [The AI DM assistant](https://replavia.com/help/ai-dm-assistant).

## People stay in control of their data

- Replying STOP, UNSUBSCRIBE or CANCEL stops every automated message the person did not ask for. If they DM you again later, your DM automations can still answer.
- If someone unsends the message with their email or phone number, Replavia deletes that detail. It also asks your connected tools to delete it.
- When Meta sends us a data deletion request, Replavia deletes that person’s data on every account that holds it. It also tells connected tools to delete their copy.
- No export or integration ever includes the person’s Instagram user id.
- Before a DM reaches an AI provider, email addresses and phone numbers are removed from the text.

## You decide what happens to comments

Comment Shield flags spam and abuse for you to review. Nothing is hidden or deleted until you click. See [Comment Shield](https://replavia.com/help/comment-shield).

## Good to know

- No app can promise that Meta will never restrict an account. Following the rules lowers the risk; it does not remove it.
- Replavia is not affiliated with, endorsed or sponsored by Meta or Instagram.
- The most useful thing you can do is send only what your post promised.